IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Oracle 19c RDBMS integration in QRadar

    Posted Tue November 21, 2023 10:50 AM

    Hello everyone,

    We want to use Oracle 19c databases in QRadar (7.5.0). The documentation describes this for Oracle 12c https://www.ibm.com/docs/en/dsm?topic=record-enabling-unified-auditing-in-oracle-12c . When trying to connect an Oracle 19c instance in the same way, the IBM® QRadar® DSM for Oracle RDBMS Audit Record cannot parse the incoming logs successfully. We ask ourselves the question: Do we have a systematic problem because the connection of Oracle 19c is not supported or should we start troubleshooting the procedure?
    Who has had similar experiences or can give us a useful answer?

    Best regards

    Jürgen Wörner



    ------------------------------
    Jürgen Wörner
    ------------------------------


  • 2.  RE: Oracle 19c RDBMS integration in QRadar
    Best Answer

    Posted Wed November 22, 2023 08:29 AM

    Hi Jurgen

    Currently the latest supported version version of Oracle is 12c.

    There is an internal issue open to support Oracle 19c.  This is currently with our development team.

    You can create a custom DSM to parse these logs while waiting for the enhancement

    https://www.ibm.com/support/pages/creating-custom-dsm-0

    Thanks



    ------------------------------
    John Dawson
    ------------------------------